Assume an Intent

Public preview: This feature is being released incrementally to customers on a rolling basis. If the feature is not available in your tenant yet, contact your Immuta representative to enable it.

Intents enforce permissions based on your specific intent for accessing data. Instead of basing access decisions solely on who you are, intents allow the policy decision to be based on what you are doing and why you need access.

Immuta generates a role or group in your data platform for each intent-group pair that is created in Immuta. In the example below, a governor creates a Clinical trial intent and assigns the group Analysts to it. Then, Immuta generates a Clinical trial intent group in Databricks that members of the group Analysts can assume to query data under that intent.

In order to act under an intent, you must assume the Immuta-generated role or group in your data platform.

Assume the Immuta-generated role

1. Click the Policies icon in the navigation menu and select Intents.
2. Click the Intent you want to assume.
3. Click the External Mapping tab and find the group you are a member of (you might be a member of more than one group assigned to the intent). Copy the Role name that corresponds with that group.
4. Navigate to your data platform and assume that role or group to act under the intent.

Once you assume the intent in your data platform, the intent attributes replace your birthright attributes. See the Intents reference guide for details about how this affects your access to data.